Advisories · Technology

VMware ESXi.

Every CVE that names VMware ESXi among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-41239 CVE record

CVSS 7.1 High

vSockets information-disclosure vulnerability
- VMware ESXi
- VMware Cloud Foundation
- Memory corruption
Not analysed yet 15 Jul 2025
CVE-2025-41238 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

PVSCSI heap-overflow vulnerability
- VMware ESXi
- VMware Cloud Foundation
- Memory corruption
Not analysed yet 15 Jul 2025
CVE-2025-41237 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

VMCI integer-underflow vulnerability
- VMware Cloud Foundation
- VMware vSphere Foundation
- Memory corruption
Not analysed yet 15 Jul 2025
CVE-2025-41236 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

VMXNET3 integer-overflow vulnerability
- VMware ESXi
- VMware Cloud Foundation
- Memory corruption
Not analysed yet 15 Jul 2025
CVE-2025-41228 CVE record

CVSS 4.3 Medium

VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability
- VMware vCenter Server
- VMware Cloud Foundation
- Cross-site scripting (XSS)
Not analysed yet 20 May 2025
CVE-2025-41227 CVE record

CVSS 5.5 Medium

Denial-of-Service Vulnerability
- VMware ESXi
- VMware Cloud Foundation
- Denial of service
Not analysed yet 20 May 2025
CVE-2025-41226 CVE record

CVSS 6.8 Medium

Guest Operations Denial-of-Service Vulnerability
- VMware ESXi
- VMware Cloud Foundation
- Denial of service
Not analysed yet 20 May 2025
CVE-2025-22225 CVE record

CVSS 8.2 HighCritical · KEVKEV · ransomware

VMware ESXi contains an arbitrary write vulnerability.
- VMware ESXi
- VMware Cloud Foundation
- CWE-123
Not analysed yet 4 Mar 2025
CVE-2025-22224 CVE record

CVSS 9.3 CriticalCritical · KEV, CVSS 9+KEV

Time-of-check time-of-use race condition in VMware ESXi and others
- VMware ESXi
- VMware Workstation
- Race condition
Not analysed yet 4 Mar 2025
CVE-2024-37085 CVE record

CVSS 6.8 MediumCritical · KEVKEV · ransomware

VMware ESXi contains an authentication bypass vulnerability.
- VMware ESXi
- VMware Cloud Foundation
- CWE-305
Not analysed yet 25 Jun 2024
CVE-2024-22273 CVE record

CVSS 8.1 High

Out-of-bounds read in VMware ESXi and others
- VMware ESXi
- VMware Workstation
- Memory corruption
Not analysed yet 21 May 2024
CVE-2024-22255 CVE record

CVSS 7.1 High

Information disclosure vulnerability
- VMware ESXi
- VMware Workstation
- Denial of service
Not analysed yet 5 Mar 2024
CVE-2024-22254 CVE record

CVSS 7.9 High

Out-of-bounds write vulnerability
- VMware ESXi
- VMware Cloud Foundation
- Memory corruption
Not analysed yet 5 Mar 2024
CVE-2024-22253 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Use-after-free vulnerability
- VMware ESXi
- VMware Workstation
- Memory corruption
Not analysed yet 5 Mar 2024
CVE-2024-22252 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Use-after-free vulnerability
- VMware ESXi
- VMware Workstation
- Memory corruption
Not analysed yet 5 Mar 2024
CVE-2022-31681 CVE record

VMware ESXi contains a null-pointer deference vulnerability.
- VMware ESXi
Not analysed yet 7 Oct 2022
CVE-2021-21974 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Out-of-bounds write in VMware ESXi and others
- VMware ESXi
- VMware Cloud Foundation
- Memory corruption
Not analysed yet 24 Feb 2021
CVE-2020-4004 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG…
- VMware ESXi
- Workstation
Not analysed yet 20 Nov 2020
CVE-2020-4005 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG…
- VMware ESXi
Not analysed yet 20 Nov 2020
CVE-2020-3992 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Use after free in VMware ESXi
- VMware ESXi
- Memory corruption
Not analysed yet 20 Oct 2020
CVE-2020-3971 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG)…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jun 2020
CVE-2020-3965 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jun 2020
CVE-2020-3964 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jun 2020
CVE-2020-3963 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jun 2020
CVE-2020-3966 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jun 2020
CVE-2020-3968 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jun 2020
CVE-2020-3967 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jun 2020
CVE-2020-3970 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jun 2020
CVE-2020-3962 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 24 Jun 2020
CVE-2020-3969 CVE record

VMware ESXi: VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839…
- VMware ESXi
- VMware Workstation
Not analysed yet 24 Jun 2020
CVE-2020-3959 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG)…
- VMware ESXi
- VMware Workstation
Not analysed yet 29 May 2020
CVE-2020-3958 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG)…
- VMware ESXi
- VMware Workstation
Not analysed yet 29 May 2020
CVE-2020-3955 CVE record

VMware ESXi: ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch…
- VMware ESXi
Not analysed yet 29 Apr 2020
CVE-2019-5521 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001)…
- VMware ESXi
- VMware Workstation
Not analysed yet 20 Sept 2019
CVE-2019-5528 CVE record

VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process.
- VMware ESXi
Not analysed yet 11 Jul 2019
CVE-2019-5517 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001)…
- VMware ESXi
- VMware Workstation
Not analysed yet 15 Apr 2019
CVE-2019-5520 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001)…
- VMware ESXi
- VMware Workstation
Not analysed yet 15 Apr 2019
CVE-2019-5516 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001)…
- VMware ESXi
- VMware Workstation
Not analysed yet 15 Apr 2019
CVE-2018-6982 CVE record

VMware ESXi: VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without…
- VMware ESXi
Not analysed yet 4 Dec 2018
CVE-2018-6974 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG…
- VMware ESXi
- VMware Workstation
Not analysed yet 16 Oct 2018
CVE-2018-6977 CVE record

VMware ESXi: VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x)…
- VMware ESXi
- VMware Workstation
Not analysed yet 9 Oct 2018
CVE-2018-6972 CVE record

VMware ESXi: VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG…
- VMware ESXi
- VMware Workstation
Not analysed yet 25 Jul 2018
CVE-2017-4941 CVE record

VMware ESXi: VMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG)…
- VMware ESXi
- VMware Workstation
Not analysed yet 20 Dec 2017
CVE-2017-4940 CVE record

VMware ESXi: The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG…
- VMware ESXi
Not analysed yet 20 Dec 2017
CVE-2017-4933 CVE record

VMware ESXi: VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8)…
- VMware ESXi
- VMware Workstation
Not analysed yet 20 Dec 2017
CVE-2017-4925 CVE record

VMware ESXi: VMware ESXi 6.5 without patch ESXi650-201707101-SG…
- VMware ESXi
- VMware Workstation
Not analysed yet 15 Sept 2017
CVE-2017-4924 CVE record

VMware ESXi: VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG)…
- VMware ESXi
- VMware Workstation
Not analysed yet 15 Sept 2017
CVE-2017-4905 CVE record

VMware ESXi: VMware ESXi 6.5 without patch ESXi650-201703410-SG…
- VMware ESXi
- VMware Workstation Pro / Player
Not analysed yet 7 Jun 2017
CVE-2017-4904 CVE record

VMware ESXi: The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG…
- VMware ESXi
- VMware Workstation Pro / Player
Not analysed yet 7 Jun 2017
CVE-2017-4903 CVE record

VMware ESXi: VMware ESXi 6.5 without patch ESXi650-201703410-SG…
- VMware ESXi
- VMware Workstation Pro / Player
Not analysed yet 7 Jun 2017
CVE-2017-4902 CVE record

VMware ESXi: VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch…
- VMware ESXi
- VMware Workstation Pro / Player
Not analysed yet 7 Jun 2017